Skip to content

v0.0.13

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Oct 20:16
· 35 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.0.13
a6e109b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Tapid 0.0.13 release notes

Verified locked installs

  • Add tapid ci to install the exact dependency graph from tapid.lock, downloading missing artifacts without resolving versions or rewriting the lockfile or manifests.
  • Verify downloaded archives against locked SHA-512 integrity and extracted trees against locked tree digests. Reuse verified store snapshots for cached packages.
  • Require a complete lockfile with artifact download URLs, including for warm-cache and offline installs. Regenerate older incomplete locks with tapid install and review the changes before using tapid ci.
  • Support tapid ci --offline when every required verified tree is already in the store.
  • Validate root and workspace manifests before activation, replace managed node_modules atomically, and retain transaction recovery. Existing unmanaged node_modules is rejected.
  • Keep dependency lifecycle scripts disabled and retain Tapid's supported dependency subset. npm lockfile import is not part of tapid ci.
  • Allow an explicit local registry fixture to supply URL-less locked artifacts only when the fixture is readable and contains every URL-less locked identity, including on warm and offline paths. Locked integrity and tree digests remain required.
Assets 14
Loading